?
Solved

SBS 2003 Security group discrepency

Posted on 2006-11-15
4
Medium Priority
?
246 Views
Last Modified: 2010-05-18
We are running SBS 2003 standard.  Today we ran across a strange group issue.  When logged into the SBS server and looking at the "server managment" under security groups I have a nice long list of the security groups we have created.  The problem comes in that not all of these security groups show up when I go to "Active directory users and computers".  

The issue showed itself after adding a user to a security group listed in server management, she still have no rights to the directory's.  I went to active directory users and computers and couldn't find the group.  But it did exist in server management list.

Any ideas?
0
Comment
Question by:DPAIT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 18

Expert Comment

by:PowerIT
ID: 17954340
Try finding it through ADUC: right click the domain and choose find.
Enter the name or first part of the name of the group
If you find it there, then have a look at the members.
And post your findings back here.

J.
0
 
LVL 6

Accepted Solution

by:
sr1xxon earned 500 total points
ID: 17956565
if you have created a security group through the SBS admin console (or alternatively thru the ADUC console) then it is in active directory.
within the server management console, security groups are created not in the usual location (groups) but in a subcontainer to which a group policy has been applied.

the 'groups' container is not the correct location for security groups with SBS.. you will save yourself headaches if you use the server management tool in creating groups and users - they will be created in the correct location.

did you give the security group rights to the share and directory?
you need to navigate to the share in explorer, click on sharing and security, and add the security group with rights - probably modify (RWXD) are what you need.
then you need to navigate to the folder that the share references, go to properties, and add rights to the FOLDER as well. if you don't have both, you won't be able to use the resource.



0
 
LVL 3

Author Comment

by:DPAIT
ID: 17960864
Found where the other group was hiding.  It doesn't explain why permissions were not being applied correctly.  the group was applied to both the share and the files system.  The group membership was correct.

HMMMM.....

More testing will tell, but the mystery is gone a least
0
 
LVL 6

Expert Comment

by:sr1xxon
ID: 17963715

GRADE C? That's a tad harsh. I didn't think I provided a bad or inaccurate answer.

0

Featured Post

Put Machine Learning to Work--Protect Your Clients

Machine learning means Smarter Cybersecurity™ Solutions.
As technology continues to advance, managing and analyzing massive data sets just can’t be accomplished by humans alone. It requires huge amounts of memory and storage, as well as high-speed processing of the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ever wonder what it's like to get hit by ransomware? "Tom" gives you all the dirty details first-hand – and conveys the hard lessons his company learned in the aftermath.
What's worse than having your data encrypted by ransomware? Getting attacked by a so-called "wiper," which simply destroys the data and offers you no hope of ever seeing it again.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question